Error 812: The connection was prevented because of a policy configuration on your RAS/VPN server

Hi,
Just wondering if anyone can help.
We have set up RAS/VPN on our Windows Server 2012 Essentials server. One of our users when trying to log in gets the below error when trying to connect to VPN:
"Error 812: The connection was prevented because of a policy configuration on your RAS/VPN server. Specifically the authentication method used by the server to verify your username and password may not match the authentication method configured in your
connection profile. Please contact the Administrator of the RAS server and notify them of this error."
The domain admin account can log in to VPN fine and any new AD account that I create can log in fine, but just not this particular user account. I checked that this account has "Dial In" access on their user account on AD and on the Anywhere Access
tab on the users properties in Windows server 2012 Essentials Dashboard the "Allow Virtual Private Network (VPN)" is ticked. They are a member of the RA_AllowVPNAccess security group.
I also configured the authentication protocol MS-CHAPv2 on the server and on the client. I also tried to connect using PPTP rather than automatic, with no luck.
I did some searching on the Internet, but virtually all of the resolutions for this issue are related to setup or configuration problems that would result in the VPN either consistently working or not-working. I tried changing a number of the NPS policies,
since the error seemed to point to an NPS issue, but this did not resolve the problem.
I'm buffled why just this user cannot connect to VPN.
Any thoughts?

Hi,
à
The domain admin account can log in to VPN fine and any new AD account that I create can log in fine, but just not this particular user account.
It is really a strange issue. I noticed that you have checked “Dial-in” tab of this problematic user properties
in ADUC. Just a confirmation, did you mean that “Allow access” option was checked under Network Access Permission? Or anything I misunderstand?
On current situation, please view the problematic account properties on Dashboard and navigate to
Anywhere Access tab, and please uncheck “Allow Virtual Private Network (VPN)” option and click Apply button. Then please re-check
“Allow Virtual Private Network (VPN)” option and apply again. Any difference?
By the way, did you check the event logs if find any related event or error?
If anything I misunderstand or any update, please don’t hesitate to let me know.
Hope this helps.
Best regards,
Justin Gu

Similar Messages

The connection was denied because the user account is not authorized for remote login

Using Terminal Server 2008 not able to get non administrator users to login to the remote desktop. Have tried from Windows server 2008 and from Windows servers 2003. Get error login in "The connection was denied because the user account is not authorized for remote login" from Windows Server 2008. Error "The requested session access is denied" from Windows Server 2000.

Is that seriously the only way to do this? Doesn't this render the "Allow log on through Terminal Services" GP Setting useless?
I would like to know this answer, as well. I have created a new AD group for my assistant admins called "Domain Admins (limited)". I have added this group to the GP setting "Allow log on through Terminal Services", but the
assistant admins cannot log in through RDP. It 'feels like' this is all I would need to do.
Craig
Found some good info
here. There are really two things required for a user to connect to a server via RDP. You can configure one of them via Group Policy but not the other.
1) Allow log on through Terminal Services can be configured through Group Policy, no problem.
2) Permissions on the RDP-listener must also be granted. If your user is a member of the local Administrators group or the local Remote Desktop Users group then this is handled. If you are trying to utilize a new, custom group (as I am),
then there isn't a way to do this via group policy (that I have found).
EDIT: Found the answer. I am creating a blog post to outline the steps. They aren't hard, but they're not self-explanatory. It deals with the Restricted Groups mentioned above, but it's still automate-able using Group Policy so that you
don't have to touch each computer. I think the above poster (Andrey Ganev) got it right, but
I had trouble deciphering his instructions.
Here is my blog post that walks through this entire process, step-by-step.

I cannot upload photos into a web site-no problems with previous versions of firefox or IE(get error message The connection was reset)

I edit a web site set up by Joomla.
I copy & paste text to it and upload photographs.
I have been doing this successfully for months
but starting yesterday adding text is OK but when I try to upload a photo there is a delay of 3-4 minutes and then an error message saying "The connection was reset"

Your plugins list shows two Flash plugins and other outdated plugin(s) with known security and stability risks.
# Shockwave Flash 10.0 r45
# Shockwave Flash 10.1 r53
# Adobe Shockwave for Director Netscape plug-in, version 11.0
# Next Generation Java Plug-in 1.6.0_19 for Mozilla browsers
Flash Player uninstall: http://www.adobe.com/go/tn_14157 (this will remove the Firefox Flash plugin and the ActiveX control for IE)
Update the [[Flash]] and [[Shockwave|Shockwave for Director]] plugin to the latest version.
*http://www.adobe.com/software/flash/about/
*http://www.adobe.com/shockwave/welcome/
*http://www.adobe.com/downloads/
Update the [[Java]] plugin to the latest version.
*http://java.sun.com/javase/downloads/index.jsp (Java Platform: Download JRE)
Do a malware check with a few malware scan programs. 
You need to use all programs because each detects different malware. 
Make sure that you update each program to get the latest version of the database.
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]

Whenever I use a search engine, I keep getting the error message "The connection was reset while the page was loading".

I am able to access the internet, but none of the search engines like Google, Yahoo or Bing will work. the page will not load. I get the error message:
The connection to the server was reset while the page was loading.
* The site could be temporarily unavailable or too busy. Try again in a few moments.
* If you are unable to load any pages, check your computer's network connection.
* If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.

Your plugins list shows two Flash plugins and other outdated plugin(s) with known security and stability risks.
# Shockwave Flash 10.0 r45
# Shockwave Flash 10.1 r53
# Adobe Shockwave for Director Netscape plug-in, version 11.0
# Next Generation Java Plug-in 1.6.0_19 for Mozilla browsers
Flash Player uninstall: http://www.adobe.com/go/tn_14157 (this will remove the Firefox Flash plugin and the ActiveX control for IE)
Update the [[Flash]] and [[Shockwave|Shockwave for Director]] plugin to the latest version.
*http://www.adobe.com/software/flash/about/
*http://www.adobe.com/shockwave/welcome/
*http://www.adobe.com/downloads/
Update the [[Java]] plugin to the latest version.
*http://java.sun.com/javase/downloads/index.jsp (Java Platform: Download JRE)
Do a malware check with a few malware scan programs. 
You need to use all programs because each detects different malware. 
Make sure that you update each program to get the latest version of the database.
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]

Firefox 10.0.2 - Error Message - The connection was reset

Hello,
I'm trying to use firefox 10.0.2 on ESS EP7. The content or Homepage frame work is not being displayed. I am getting the message, "The connection was reset". If I click on Try Again, I get the same error. Does anyone have a suggestion for a fix.

Do a malware check with several malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware.
All these programs have free versions.
Make sure that you update each program to get the latest version of their databases before doing a scan.
*Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php
*AdwCleaner: http://www.bleepingcomputer.com/download/adwcleaner/ http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
*SuperAntispyware: http://www.superantispyware.com/
*Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx
*Windows Defender: http://windows.microsoft.com/en-us/windows/using-defender
*Spybot Search & Destroy: http://www.safer-networking.org/en/index.html
*Kasperky Free Security Scan: http://www.kaspersky.com/security-scan
You can also do a check for a rootkit infection with TDSSKiller.
*Anti-rootkit utility TDSSKiller: http://support.kaspersky.com/5350?el=88446
See also:
*"Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

I oocasionally get an error msg "The connection was interrupted" with some reasons. Usually a reload works but sometimes I need to change the https to http to get the load.

The error msg states the site may be tempo unavailable or that I have a network problem; even trying to open a new tab will give me the same error. When I attempt to load my own website I get the "unsafe site" msg but switching to http from https allows my site to load. I can open a tab in Firefox ten times without a problem and then I'll get "The connection was interrupted" msg. I did a complete delete and reload of Firefox but the issue remains.

see if this is helpful:
[http://support.mozilla.org/en-US/kb/Error%20loading%20web%20sites#w_the-problem-only-happens-with-certain-websites Error loading web sites - The problem only happens with certain websites]
thank you
Please mark "Solved" the answer that really solve the problem, to help others with a similar problem.

Everytime I click on firefox I get an error message "The connection was resert, try again ????

Everytime I start firefox as my primary web browser, I get an error message that "The connection was reset" .... Please click on try again .... Then I click on try again and it works fine .....
== This happened ==
Every time Firefox opened
== when I first downloaded it

I have the same problem on a fresh install of 3.6.3 on Windows Vista. Once I changed my home page from the Firefox/google start page to my iGoogle page, it would not load on the first try and displayed "The connection was reset.
The connection to the server was reset while the page was loading." The page loaded properly when I pressed retry or the refresh icon.
The same error message shows when I click on a link from an e-mail in Outlook.
One thing that helped was I put https at the beginning of my homepage, instead of http, and it now loads on the first time.

When I open Firefox I get an error saying "The connection was reset"

I went through the articles and did what they said for a situation like this but it didn't fix it. It also says underneath "Connection was reset" "The connection to the server was reset while the page was loading."
However you can help would be most appreciated. Thank you for your time.

see if this is helpful:
[http://support.mozilla.org/en-US/kb/Error%20loading%20web%20sites#w_the-problem-only-happens-with-certain-websites Error loading web sites - The problem only happens with certain websites]
thank you
Please mark "Solved" the answer that really solve the problem, to help others with a similar problem.

When I try to go to Youtube I get the error message :the connection was reset". Any ideas?

Site won't open

You can try these steps in case of issues with web pages:
You can reload web page(s) and bypass the cache to refresh possibly outdated or corrupted files.
*Hold down the Shift key and left-click the Reload button
*Press "Ctrl + F5" or press "Ctrl + Shift + R" (Windows,Linux)
*Press "Command + Shift + R" (Mac)
Clear the cache and remove cookies only from websites that cause problems.
"Clear the Cache":
*Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: "Show Cookies"
Start Firefox in [[Safe Mode|Safe Mode]] to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem.
*Switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance
*Do NOT click the Reset button on the Safe Mode start window
*https://support.mozilla.org/kb/Safe+Mode
*https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Error "The remote connection was disconnected because there are no Remote Desktop License Servers available to provide a license. Please contact the server administrator"

Hi,
I have been using Windows server 2012 at my company and generally take a remote access to this server. However, since last few days, I have been receiving the Error "The remote connection was disconnected because there are no Remote Desktop License
Servers available to provide a license. Please contact the server administrator".
My entire work has come to a halt because of this error as all my applications are running this server and their remote access is needed for my regular requirements.
I had tried one of the solutions proposed at one of these forums especially using gpedit.msc but to no avail.
Regards,
Aditya

Hi Aditya,
Thank you for posting in Windows Server Forum.
Agree with the words of armin, please verify that you have properly installed correctly. Verify RDS Licensing service running on License Server. Verify that the client, the RDS server, and the license server can communicate by ensuring that Domain Name System
(DNS) is configured correctly on each computer. You can run the ping command from each computer to each computer using the IP address, FQDN, and the NetBIOS name. If any of the ping commands fail, verify the DNS configuration on the network.
In addition, you can also try “GracePeriod” registry setting on this path (HKLM\System\CurrentControlSet\Control\Terminal Server\RCM) from
this article.
Hope it helps!
Thanks.
Dharmesh Solanki

Experiencing near-constant the connection was reset error.

For about the last 3 months, I've had two seemingly-related problems: 1] "The connection was reset/interrupted" error; and 2] web pages loading in a primitive, odd-looking form. Both used to occur every once in a while, but now they're near-constant, to the point that doing anything online is at best a struggle and at worst impossible. The error is especially bad: makes it extremely difficult to reach a web page, load it completely, or do anything should I ever get there (searches, clicking links, etc.). Might be even worse with some sites than others, but it's hard to tell-- seems pretty bad wherever I go on the web. As far as I can tell, this started when I was still using Waterfox, and updated to 32.0.3; I recently switched back to Firefox in hopes of escaping it, but found the same thing happening there. I've tried the suggestions given in the forums (like clearing the cache, removing cookies, pressing Shift while reloading, pressing Ctrl + F5 [for Windows], etc.), as well as uninstalling and re-installing Waterfox, but nothing works. Since my own computer skills are modest at best, I've pretty much run out of troubleshooting options at this point. What I'm looking for is a solution to this, rather than just ways of coping with it. Does anyone know what's wrong and how to fix it? Will it be solved by the next Firefox update? And is there another browser you can recommend as a replacement for Firefox? I'm really at the end of my rope here; please help!
As of 02/26/15, still having the same problem. I've tried scanning for malware (didn't find any) and configuring Windows firewall for Firefox (made no difference). I've noticed that there's a more accurate description for what I'm experiencing than the one I originally posted: web pages can rarely finish loading anymore, unless they're very short (and often not even then)-- if I wait for them to do so, the error usually occurs. Some are usable if I stop the loading process before the error shows up, but many (most?) won't work that way (not enough ever makes it onscreen). Seems like this site is largely unaffected, but places like rogerebert.com or TV Tropes are pretty much inaccessible to me now. Is anybody still interested in helping me solve this? Because I'm about ready to give up on Firefox for good at this point. Please save me from resorting to Google Chrome or, god forbid, Internet Explorer!

''iamjayakumars [[#answer-685843|said]]''
<blockquote>
What security software (firewall, anti-virus) do you have? 
It is possible that your security software (firewall, anti-virus) blocks or restricts Firefox or the plugin-container process without informing you, possibly after detecting changes (update) to the Firefox program. 
Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full, unrestricted, access to install for Firefox and the plugin-container process and the updater process. 
See: 
*https://support.mozilla.org/kb/Server+not+found
*https://support.mozilla.org/kb/Firewalls
*https://support.mozilla.org/kb/fix-problems-connecting-websites-after-updating
</blockquote>
Re: my security software: I use Windows Firewall and Microsoft Security Essentials (also Malwarebytes Anti-Malware, if that helps).
I've now tried the above link's instructions for configuring Windows Firewall to allow Firefox access. It may have helped slightly with the error (which seems to be happening a bit less often); however, the primitive-looking-web-page problem is if anything worse, pages are INCREDIBLY slow to load, and the error remains frequent (can't tell if this possible respite is just temporary, or even mere wishful thinking on my part). In any case, though, my original problem hasn't been solved yet.

Android MS RDP - RPC Error: Your connection was denied because of a Resource Access Policy (TS_RAP). Please contact your server administrator. (2147965402).

I love iTap Mobile. Paid for the app. Sorry to see them discontinue it, but now I know why. Microsoft bought them out! But even though free, I am getting an error: RPC Error: Your connection was denied because of a Resource Access
Policy (TS_RAP). Please contact your server administrator. (2147965402). I worked with iTap to fix this so I guess they sold Microsoft their older buggy code... Microsoft, please fix!
PS: This is the Android version. Mac and iOS are both okay.
EDIT: After an update a few months ago, iOS is no longer working. Not sure if the problem is related to the Android MSRDP issue.
UPDATE - Relevant posts (need Android RDP software engineer to fix):
Event Viewer Log when using Android client:
The user
"DOMAIN\testuser", on client computer "10.x.x.x", met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM". (This
is most likely for logging into RD Web - icons shows up).
The
user "DOMAIN\testuser", on client computer "10.x.x.x", did not meet resource authorization policy requirements and was therefore not authorized to resource"localhost".
The following error occurred: "23002". (This is after clicking on any
of the icons).
I
think the Android MS RDP client is providing the incorrect resource. It shouldn't be "localhost".
It should be the RD Connection Broker's hostname, I believe.
Here's what it should look like (connected using a Windows PC going
through the RD Web portal via Internet Explorer):
The user "DOMAIN\testuser", on client computer "10.x.x.x", met connection
authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM".
The user "DOMAIN\testuser", on client computer "10.x.x.x", met resource
authorization policy requirements and was therefore authorized to connect to resource "rdsfarm.domain.com".
The user "DOMAIN\testuser", on client computer "10.x.x.x", connected
to resource "rdsfarm.domain.com".
Stephan,
Do you have any way to contact the software engineer who worked on the Android version of the RDP client? Please
have them read this thread. They need to fix the hard coded "localhost" resource to be a variable (namely whatever the user put in for the server).
This is why the MS RDP app is failing in situations where the FQDN for the RD Gateway and Connection Broker uses
the same host name.
Again, this is not a configuration problem on our end as it works as intended with the native Windows RDP client
as well as the Mac and iOS version of the mobile RDP client (all based on iTap Mobile's RDP app).
This is a problem specific to the Android RDP app.
PS: No matter how hard I try, the WYSIWYG editor is not very WYSIWYG at all, and so everything here looks messed up even though it looked right when I posted it (it is deleting new blank lines I'm inserting to make it spaced out and easier to read). See
below to read the post in context.

Thanks for the bumps, everyone. I haven't check this thread in a while because I basically gave up on Microsoft's ability to respond. Unlike paid apps, there's no number to call or ticket to open when an app like this malfunctions.
Just to give you an update, iOS users started having issues connecting a few months ago. I don't remember what version started this. I'm not sure if it's the same problem.
Also, the newest version now gives a slightly different error message: RpcOverHttpEndpointException: 2, Your connection was denied because of a Resource Access Policy (TS_RAP). Please contact your server administrator.
For Android users, I am starting to recommend Xtralogic Remote Desktop Client. It's a paid app, but it works great. I don't know of any alternative for iOS.
MSRDP for Mac OSX (was also an iTap application) continues to work throughout the many updates.
We need a software engineer from MS to read my first post. All the information that will point to a fix is there. I strongly believe someone hardcoded the string "localhost" instead of using a variable to point to the FQDN of the rdsfarm
name.
Here's that info again (copied/pasted). It doesn't take an engineer to understand the issue. If you know how to decipher Event Logs, you can see where the problem is.
Event
Viewer Log when using Android client:
The
user "DOMAIN\testuser", on client computer "10.x.x.x", met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM". (This
is most likely for logging into RD Web - icons shows up).
The
user "DOMAIN\testuser", on client computer "10.x.x.x", did not meet resource authorization policy requirements and was therefore not authorized to resource"localhost".
The following error occurred: "23002". (This
is after clicking on any of the icons).
I
think the Android MS RDP client is providing the incorrect resource. It shouldn't be "localhost".
It should be the RD Connection Broker's hostname, I believe.
Here's
what it should look like (connected using a Windows PC going through the RD Web portal via Internet Explorer):
The user "DOMAIN\testuser", on client computer "10.x.x.x",
met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM".
The user "DOMAIN\testuser", on client computer "10.x.x.x",
met resource authorization policy requirements and was therefore authorized to connect to resource "rdsfarm.domain.com".
The user "DOMAIN\testuser", on client computer "10.x.x.x",
connected to resource "rdsfarm.domain.com".

RemoteApps Error "Your connection was denied because of a Network Access Policy (TS_NAP). Please contact your server administrator."

Hello All,
Good day. May I ask if anyone experienced this error when trying to access remoteapps in Azure? We are using IaaS and set-up RDS using Windows 2012 R2 but we are getting an error below.
"Your connection was denied because of a Network Access Policy (TS_NAP). Please contact your server administrator.
Various roles and services (Broker, Session Host, RD Gateway and Web Access are installed on each VMs).
Please advise.
Thanks,
Glenn

Hi Glen;
Looks like the set up was not done correctly. Please follow the guidelines given on this
blog by Keith Mayer.
Regards;
Prasant

Cannot sync my ipad because the connection was reset?

I can't sync my ipad or iphone because an error code comes up stating that it cannot be synced because the connection was reset. It comes up after the backup process of the sync session.

Try another cable and be sure it's genuine Apple. Also make sure there is no debris in the connection area of the device.

TS4291 I can't send mail from my iPad apps, I just get the error message, 'The recipient- was rejected by the server because it does not allow relaying.' Does anyone know what this means and how to fix the problem.

I can't send mail from my iPad apps, I just get the error message, 'The recipient… was rejected by the server because it does not allow relaying.' Does anyone know what this means and how to fix the problem.

iOS: Unable to send or receive email
http://support.apple.com/kb/TS3899
Can’t Send Emails on iPad – Troubleshooting Steps
http://ipadhelp.com/ipad-help/ipad-cant-send-emails-troubleshooting-steps/
Setting up and troubleshooting Mail
http://www.apple.com/support/ipad/assistant/mail/
Using a POP account with multiple devices
http://support.apple.com/kb/ht3228
iOS: Adding an email account
http://support.apple.com/kb/HT4810
iOS: Setting up an Outlook.com, Hotmail, Live, or MSN email account
http://support.apple.com/kb/ht1694
Server does not allow relaying email error, fix
http://appletoolbox.com/2012/01/server-does-not-allow-relaying-email-error-fix/
Why Does My iPad Say "Cannot Connect to Server"?
http://www.ehow.co.uk/info_8693415_ipad-say-cannot-connect-server.html
How to Sync Contacts with Your iPad Using iTunes
http://www.dummies.com/how-to/content/how-to-sync-contacts-with-your-ipad-using- itunes.html
iOS: 'Mailbox Locked', account is in use on another device, or prompt to re-enter POP3 password
http://support.apple.com/kb/ts2621
eMail Groups - You can use a third party app that many users recommend.
MailShot - https://itunes.apple.com/us/app/mailshot-pro-group-email-done/id445996226?mt=8
Group Email - https://itunes.apple.com/us/app/group-email!-mail-client-attachments/id380690305 ?mt=8
iPad Mail
http://www.apple.com/support/ipad/mail/
Configuration problems with IMAP e-mail on iOS with a non-standard SSL port.
http://colinrobbins.me/2013/02/09/configuration-problems-with-imap-e-mail-on-ios -with-a-non-standard-ssl-port/
Try this first - Reset the iPad by holding down on the Sleep and Home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider - let go of the buttons. (This is equivalent to rebooting your computer.)
Or this - Delete the account in Mail and then set it up again. Settings->Mail, Contacts, Calendars -> Accounts Tap on the Account, then on the red button that says Remove Account.
 Cheers, Tom

Error 812: The connection was prevented because of a policy configuration on your RAS/VPN server

Similar Messages

Maybe you are looking for